CVE-2006-6605

Stack-based buffer overflow in the POP service in MailEnable Standard 1.98 and earlier; Professional 1.84, and 2.35 and earlier; and Enterprise 1.41, and 2.35 and earlier before ME-10026 allows remote attackers to execute arbitrary code via a long argument to the PASS command.

• http://secunia.com/advisories/23127Patch, Vendor Advisory
• http://secunia.com/secunia_research/2006-75/advisory/Patch, Vendor Advisory
• http://securityreason.com/securityalert/2053
• http://securitytracker.com/id?1017395
• http://www.mailenable.com/hotfix/Patch
• http://www.securityfocus.com/archive/1/454713/100/0/threaded
• http://www.securityfocus.com/bid/21645
• http://www.vupen.com/english/advisories/2006/5052
• http://secunia.com/advisories/23127Patch, Vendor Advisory
• http://secunia.com/secunia_research/2006-75/advisory/Patch, Vendor Advisory
• http://securityreason.com/securityalert/2053
• http://securitytracker.com/id?1017395
• http://www.mailenable.com/hotfix/Patch
• http://www.securityfocus.com/archive/1/454713/100/0/threaded
• http://www.securityfocus.com/bid/21645
• http://www.vupen.com/english/advisories/2006/5052

Published

Dec 19, 2006

Last Modified

Jun 16, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2006-6599maketorrent.php in TorrentFlux 2.2 allows remote authenticat…
• CVE-2006-6600Cross-site scripting (XSS) vulnerability in dir.php in Torre…
• CVE-2006-6601Windows Media Player 10.00.00.4036 in Microsoft Windows XP S…
• CVE-2006-6602explorer.exe in Windows Explorer 6.00.2900.2180 in Microsoft…
• CVE-2006-6603Buffer overflow in the YMMAPI.YMailAttach ActiveX control (y…
• CVE-2006-6604Directory traversal vulnerability in downloaddetails.php in …
• CVE-2006-6606Multiple SQL injection vulnerabilities in Clarens jclarens b…
• CVE-2006-6607The Java Key Store (JKS) for WebSphere Application Server (W…
• CVE-2006-6608Unspecified vulnerability in SSH key based authentication in…
• CVE-2006-6609Nexuiz before 2.2.1 allows remote attackers to cause a denia…
• CVE-2006-6610clientcommands in Nexuiz before 2.2.1 has unknown impact and…
• CVE-2006-6611PHP remote file inclusion vulnerability in interface.php in …